I don’t know how easy it would be to migrate to your own local machine, but what you’re describing sounds like Desktop-as-a-Service. All of the major cloud providers offer this in some form.

DroidFS has been working well for me. It’s available on F-Droid.

Not easily, perhaps. But it’s certainly possible. We already have space technology for unfolding small packages into large sheets. Not to mention, you don’t need a single 100m collection surface when you can accomplish similar things with many smaller surfaces spaced apart. See the Very Large Array.

Where is the analytics data supposed to go if you aren’t hosting a service to store it? Are you expecting the author of this free and open source analytics platform to also provide free hosting and storage?

Can confirm. This recipe is very good.

all public bodies must disclose the source code of software developed by or for them, unless precluded by third-party rights or security concerns

So this effectively changes nothing.

Installing by piping from curl is pretty common and not a red flag in and of itself. Even Rust is installed this way. If you don’t trust the URL, you also shouldn’t trust any binary installers downloaded from that website.

Android and iOS don’t let mobile apps run continuously in the background. If an app is closed or in the background, it generally can’t talk to its own servers.

Instead, Google and Apple provide a service that allows the apps’ servers to push a message even if the app is closed.

If you take out the employer-side taxes and cost of benefits, maybe. A fair number of their employees must be software engineers, and that much compensation isn’t unreasonable for expert software engineers.

Where does the initial cryptographic verification come from? I’m not arguing that you can’t pin certificates.

There is no way a user can know the website is real the first time it’s visited, without it presenting a verifiable certificate. It would be disastrous to trust the site after the first time you connected. Users shouldn’t need to care about security to get the benefits of it. It should just be seamless.

There are proposals out there to do away with the CAs (Decentralized PKI), but they require adoption by Web clients. Meanwhile, the Web clients (chrome) are often owned by the same companies that own the Certificate Authorities, so there’s no real incentive for them to build and adopt technology that would kill their $100+ million CA industry.

I have GPay and I frequently get notifications telling me to claim their reward points. Those notifications aren’t configurable separately from the payment notifications at the OS level. Super annoying.